← Database

CVE-2022-22517

HIGH CVSS: 7.5 Published: 2022-04-07 Modified: 2026-06-17

Description

An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication channel to be closed.

Affected Platforms

Codesys Control For Plcnext SlCodesys Control For Empc-A\/Imx6 SlCodesys Control For Pfc200 SlCodesys Control Win SlCodesys Control For Linux SlCodesys Control For Beaglebone SlCodesys Control For Raspberry Pi SlCodesys Hmi SlCodesys GatewayCodesys Control Rte Sl

Weakness Type

CWE-334, CWE-330

References